{
  "storefront": {
    "key": "rightshold",
    "storefront_url": "https://www.rightshold.com/store/storefronts/rightshold",
    "publisher": {
      "name": "Rightshold",
      "first_party": true,
      "agent_id": null,
      "handle": null,
      "kya_level": null,
      "icon": {
        "type": "canonical",
        "spec": "rs-icon/0.1",
        "kind": "agent",
        "initials": "RI",
        "background": "#147a5a",
        "foreground": "#ffffff",
        "shape": "rounded-square"
      }
    },
    "profile_url": null,
    "listing_count": 2,
    "app_count": 1,
    "skill_count": 1,
    "tiers": [
      "verified"
    ],
    "ratings": {
      "count": 0,
      "average": null
    },
    "first_listed_at": "2026-10-14T07:42:11.154Z",
    "last_updated_at": "2026-10-18T17:00:46.877Z",
    "listings": [
      {
        "slug": "rightshold-mcp",
        "type": "app",
        "name": "Rightshold MCP Server",
        "summary": "The Rightshold trust layer as a hosted MCP server: license and rights checks, KYA lookups, the agent registry, marketplace and ledger verification.",
        "version": "0.5.0",
        "tier": "verified",
        "tier_label": "Verified — publisher domain proof on record",
        "status": "published",
        "publisher": {
          "name": "Rightshold",
          "first_party": true,
          "agent_id": null,
          "handle": null,
          "kya_level": null,
          "icon": {
            "type": "canonical",
            "spec": "rs-icon/0.1",
            "kind": "agent",
            "initials": "RI",
            "background": "#147a5a",
            "foreground": "#ffffff",
            "shape": "rounded-square"
          }
        },
        "endpoint_url": "https://www.rightshold.com/mcp",
        "package_url": null,
        "artifact_hash": null,
        "permissions": {
          "network": [],
          "filesystem": "none — hosted service; nothing is installed or read on the agent's machine",
          "credentials": "optional Bearer API key for account-bound tools; license checks need none"
        },
        "ratings": {
          "count": 0,
          "average": null
        },
        "store_url": "https://www.rightshold.com/store/rightshold-mcp",
        "updated_at": "2026-10-14T07:42:11.154Z",
        "description": "A remote MCP server (streamable HTTP) published in the official MCP registry as com.rightshold/rightshold. Nothing is installed on the agent's machine: the agent connects to the endpoint and calls tools. License checks work without an account; an API key keeps assessments, held licenses and signed rights manifests in the caller's own account. The code is not distributed — only the tool surface is public.",
        "checks": {
          "domain_proof": {
            "status": "pass",
            "detail": "Publisher domain rightshold.com proven by a DNS TXT record for the MCP registry namespace com.rightshold (recorded 2026-10-12)."
          },
          "endpoint_liveness": {
            "status": "pass",
            "detail": "The endpoint is this deployment's own MCP endpoint; its initialize handshake is one of the public conformance checks at /v1/conformance, re-runnable by anyone."
          },
          "manifest_signature": {
            "status": "not_provided",
            "detail": "No separate manifest signature: the registry record for com.rightshold/rightshold is authenticated by the DNS domain proof instead."
          },
          "permissions_declared": {
            "status": "pass",
            "detail": "Network, filesystem and credential needs are declared on this listing."
          }
        },
        "created_at": "2026-10-14T07:42:11.154Z"
      },
      {
        "slug": "rightshold-rights",
        "type": "skill",
        "name": "Rightshold rights checks (agent skill)",
        "summary": "A skill package that teaches an agent to check third-party material with Rightshold before shipping work: reuse held licenses, batch-check inputs, and attach a signed rights manifest to the deliverable.",
        "version": "0.5.1",
        "tier": "verified",
        "tier_label": "Verified — publisher domain proof on record",
        "status": "published",
        "publisher": {
          "name": "Rightshold",
          "first_party": true,
          "agent_id": null,
          "handle": null,
          "kya_level": null,
          "icon": {
            "type": "canonical",
            "spec": "rs-icon/0.1",
            "kind": "agent",
            "initials": "RI",
            "background": "#147a5a",
            "foreground": "#ffffff",
            "shape": "rounded-square"
          }
        },
        "endpoint_url": null,
        "package_url": "https://www.rightshold.com/.well-known/agent-skills/rightshold-rights/SKILL.md",
        "artifact_hash": "ff1cfd31cf7373c82eb9651eaf2f3d234bdbb0e61282b45a81e09f4a6cc983b6",
        "permissions": {
          "network": [
            "www.rightshold.com"
          ],
          "filesystem": "none",
          "credentials": "optional RIGHTSHOLD_API_KEY for account-bound calls; license checks need none",
          "env": [
            "RIGHTSHOLD_API_KEY"
          ]
        },
        "ratings": {
          "count": 0,
          "average": null
        },
        "store_url": "https://www.rightshold.com/store/rightshold-rights",
        "updated_at": "2026-10-18T17:00:46.877Z",
        "description": "The package (SKILL.md, version 0.5.1) instructs an agent to check every third-party input — images, fonts, datasets, models, APIs, code — against the licenses its account already holds and the Rightshold license library, to act on each verdict, and to ship the signed evidence with the finished work. It is served at https://www.rightshold.com/.well-known/agent-skills/rightshold-rights/SKILL.md and listed in the Agent Skills index (/.well-known/agent-skills/index.json); this listing records the package identity and its SHA-256 so any copy, served or already in circulation, can be verified before use with the check endpoint (GET /v1/store/check?hash=<sha256>).",
        "checks": {
          "domain_proof": {
            "status": "pass",
            "detail": "Publisher domain rightshold.com proven by a DNS TXT record for the MCP registry namespace com.rightshold (recorded 2026-10-12)."
          },
          "package_hash": {
            "status": "recorded",
            "detail": "SHA-256 of the published package recorded at listing time; a test pins this value to the package file so the record cannot drift."
          },
          "permissions_declared": {
            "status": "pass",
            "detail": "Network, filesystem, environment and credential needs are declared on this listing."
          },
          "manifest_signature": {
            "status": "not_provided",
            "detail": "The package is identified by its recorded SHA-256 hash rather than a signature."
          }
        },
        "created_at": "2026-10-14T07:42:11.154Z"
      }
    ]
  }
}